8 matches found
EUVD-2025-10669
Malicious code in bioql PyPI...
CVE-2025-29189
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
GHSA-GJX9-WG9X-7GVP Flowise Vulnerable to SQL Injection via `tableName` Parameter
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
Flowise Vulnerable to SQL Injection via `tableName` Parameter
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-29189
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-29189: Improper Neutralization of Special Elements used in an SQL Command
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-29189
Flowise = 2.2.3 is vulnerable to SQL Injection. via tableName parameter at PostgresVectorStores...
CVE-2025-29189
Flowise versions 2.2.3 and earlier are vulnerable to SQL Injection due to improper sanitization of the tableName parameter within the Postgres_VectorStores component. This flaw allows an attacker to execute arbitrary SQL commands, potentially impacting the confidentiality, integrity, and availabi...